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PAST I 

CRYPTOGRAPHIC SYSTEMS 

Section I 

INTRODUCTORY REMARKS 

Paragraph ' 



R6sum6 of preceding information 1 

Sequence of study 2 



1. Rfisumfi of preceding information. — a. In Special Text No. 
165 (1935), Elementary Military Cryptography, the student was 
given his first introduction to the study of the more simple means 
and methods of secret writing. Considerable attention was devoted' 
to certain preliminary data in the nature of definitions of basic terms 
employed in cryptography and of the general circumstances surround- 
ing the use of cryptography in military communications. The factors* 
determining the influence or effect that the analysis of military- 
cryptograms will have on the tactical situation were discussed some- 
what in detail, and it was shown that of these factors the most im- 
portant is the degree of cryptographic security inherent in the cryp- 
tographic system itself. This was then discussed in detail in con- 
nection with related factors involved in the length of time required to 
solve military cryptograms. Attention was also directed to infor- 
mation bearing upon the employment of cryptography in our Army, 
and the functions, duties, and responsibilities of the various arms and 
services concerned in it were set forth. Coming then to a discussion 
of certain preliminary details of a practical nature, it was shown that 
systems suitable for the military use must conform to certain more 
or less rigid requirements before they can even be considered for such 
use because of the present-day limitations of the art of signal com- 
munication in general. 

b. Having assimilated all the foregoing data of an intro ductoiy 
nature, tire student then took up the study of the two principal classes 
of cryptograms: transposition and substitution. Various examples 
of cipher systems of the transposition class were first illustrated, these 
starting out with the simplest varieties of monoliteral route trans- 
position and then progressing through more complex types of simple 
columnar and keyword columnar methods. Only a hint was con- 
veyed as to the existence of far more complicated double and triple 
transposition systems. The principal disadvantages of transposition 
methods in general were discussed. Then substitution systems were 
taken up and after a brief discussion of the nature of alphabets in 
general and of the kinds of cipher alphabets in particular, a few 
examples of simple monoalphabetic substitution ciphers wore given. 

( 1 ) 
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Methods of producing mixed alphabets were illustrated, and the use of 
sliding basic sequences to derive a set of secondary alphabets was 
described. Cases of monoalphabetic substitution with variants were 
presented and their disadvantages from the point of view of crypto- 
graphic security were discussed. It was stated that despite a multi- 
plicity of values for cipher equivalents, such methods do not yield 
cryptograms of a high degree of security, and for this reason other 
methods of producing a multiplicity of values, based upon true poly- 
alphabetic methods, are more satisfactory. The use of cipher disks 
and cipher tables of various sorts was discussed in connection with 
more complicated types of substitution, and their disadvantages 
pointed out. Mention was made of methods of increasing the degree 
of cryptographic security by suppressing or eliminating the manifes- 
tations of periodicity in polyalphabetic systems based upon the use 
of a repeating key. These led to a consideration of the development 
and use of cryptographs and cipher machines, a few of which were 
merely mentioned. 

c. The category of substitution methods under the heading of code 
systems was then discussed and examples of the various types of code 
words and codebook arrangements given. It was emphasized that 
at the present time code methods of cryptography predominate in 
our Army, and the reasons for this situation outlined. This involved 
a comparison of the advantages and disadvantages of cipher and code 
methods from the point of view of simplicity, rapidity, practicability, 
secrepy , accuracy, and economy. Considerable attention was devoted 
to the secrecy requirements of a cryptographic system for military use, 
and it was pointed out that at present good code systems offer greater 
advantages in this respect than do those cipher systems which may be 
regarded as being sufficiently practicable for military use. 

d. There then followed a brief discussion of the errors which are 
almost inevitable in cryptographic communication, and of methods for 
their suppression and elimination. Finally, a summary of the funda- 
mental rules for safeguarding cryptograms was presented. 

e. With the foregoing as a background, a review of which is recom- 
mended, the student is in a position now to take up the study of more 
advanced cryptographic methods. Special emphasis is to be laid 
only upon such systems as are practicable for military use. It is 
necessary to add that viewpoints are always undergoing change; 
what is regarded as wholly impracticable today may, through some 
unforeseen improvement in technique, become feasible tomorrow, 
and it is unwise to condemn a system too hastily. For example, before 
the World War, and indeed for the first two years of that conflict, 
the use of codebooks in the theater of operations was regarded as 
wholly impracticable. Colonel Hitt in his Manual jar the Solution of 
Military Ciphers, published in 1916, says: 
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The necessity for exact expression of ideas practically excludes the use of codes 
for military work, although it is possible that a special tactical code might be 
useful for preparation of tactical orders. 

Also, in an official British Army Manual of Cryptography prepared 
in 1914 is found the following statement: 

Codes will first be considered, but as they do not fulfill the conditions required 
of a means of secret communication in the field, they need not be dealt with here 
at length. 

It need only be pointed out in this connection that today code 
methods predominate in the secret communication systems of the 
military, naval, and diplomatic services of practically all the large 
nations of the world. Nevertheless, it is likely that within the next 
decade or two the pendulum may once more swing over to the other 
position and cipher methods may again come to the fore, especially 
if mechanical and electrical cipher machines are perfected so that 
their operation becomes practicable for general use. It is for this 
reason, if for no other, that the cryptographer who desires to keep 
abreast of progress must devote considerable attention to the more 
complicated cipher methods of the past and present time, for with the 
introduction of mechanical and electrical devices the complexities and 
difficulties of these hand-operated methods may be eliminated. As 
an instance of this, there may be cited a method of cryptography 
which is purely mathematical in character and which is so complicated 
when operated by hand that its use as a military cipher would be 
practically impossible; yet, a mechanical device for performing the 
mathematical operations involved in cryptographing and decrypto- 
graphing can be constructed, and a compact, efficient machine, based 
upon the cryptographic principles involved, may easily become a 
reality for field use. Consequently, if among the methods to be set 
forth herein certain ones appear to the student to fall outside the 
realm of what is today considered practicable, it should be remem- 
bered that the purpose in describing them is to present for his consid- 
eration various basic cryptographic principles, and not to set forth 
methods that may with a high degree of probability be encountered in 
military cryptography in the immediate future. 

2. Sequence of study • i - ; -Ju8t as in the preceding text, transposi- 
tion systems will first be discussed, then substitution systems. Con- 
siderable attention will be devoted to combined substitution and 
transposition methods. Following this will come a description of a 
limited number of cryptographs of the more complex type, together 
with a discussion of their present-day limitations. Thereafter, a 
small amount of space will be devoted to code systems, with special 
emphasis upon enciphered code systems. Finally, there will follow 
a discussion of a Signal Corps service called the Signal Intelligence 
Service, under which certain cryptographic duties are conducted. 
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A. TRANSPOSITION SYSTEMS 

Section II 

MONOPHASE TRANSPOSITION SYSTEMS 

Paragraph 



Transposition systems employing geometric designs 3 

Trapezoidal designs 4 

Triangular designs 5 

Diagonal methods 6 

Interrupted keyword transposition 7 

Permutation method 8 

Transposition method using special figures 9 



8. Transposition systems employing geometric designs. — In 

the preceding text brief mention was made of the use of geometric 
designs and figures other than rectangles in producing transposition 
ciphers. It was stated that triangles, trapezoids, and polygons of 
various symmetrical shapes can be employed. Figures of these types 
form connecting links between the methods that use simple rectangu- 
lar designs and the more complicated methods that use figures in 
which transposition takes place along diagonals. 

4. Trapezoidal designs. — a. A trapezoid or, more accurately, a 
truncated triangle, of prearranged dimensions as regards the number 
of cells (which in this case are rhombs) into which it is to be parti- 
tioned, is constructed. There will be left on one side of the design a 
series of small triangles which are not to be used for inscribing letters, 
and are therefore crossed off in the design, as shown in Figure 1. 
Only two agreements are necessary in order to fix the dimensions of 
the design: a keyword or keyphrase to determine the number of cells 
at the base of the design, and an understanding as to the height of the 
design expressed in number of cells. The successive horizontal rows 
of cells will decrease by one in number from bottom to top of the 
design. 

In Figure 1, the keyphrase NO CANDY FOR ISSUE is used as a 
basis for deriving a numerical key of 15 elements, and it is assumed 
that by prearrangement it was agreed that the height of the design 
should be eight cells. Therefore, the bottom row has 15 cells, the 
next one upwards, 14, the next, 13, and so on, to the last, with 8 cells. 
The inscription may follow any route agreed upon; in the example, it 
follows the normal manner of writing. The transcription follows the 
numerical key order, yielding this cryptogram: 

ODAIK AEDME HPODV ITEIP NHUET BOBRO 
HDTFS EISNI ETBEF BCBTM ESHGA RTORD 
IRERE AWARR ERTNS IEPVR VASEO FTEDL 
NA 

! b. Decryptographing is merely the reverse of cryptographing, there 
being no difficulties provided that the design has been correctly con- 
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structed. For this purpose cross-section paper will be found useful. 
The analysis of such a cryptogram is somewhat complicated by the 
presence of columns having yarying numbers of letters; it may be 
further complicated by following complex routes in inscription. It is 



7 — 9 — 2—1 — 8 — 3-15 — 5-10-U—6-12-13-14 — 4 



N 0 C A 



DXFORISSUE 



also possible to follow a numerical key in the inscription of the plain 
text in horizontal lines; this additional procedure would further 
complicate and delay solution. 

B. Triangular designs. — a. The simplest way of drawing up a 
triangle for cryptographing is to take cross-section paper, draw a 
square the side of which is equal Q 

to the length agreed upon as ex- m m 

pressed in the number of cells, and — — . 

then draw a diagonal cutting the N 

large square into two equal tri- \ _________ ___ 

angles. This is shown in Figure \ 

2, where the length agreed upon 

is nine, i. e., nine cells per side. 'r 

The letters of the plain text are ■ — ^ 

inscribed in accordance with any — J ^ 

prearranged route, the one illus- _S, 

trated in Figure 3 being a simple \ 

method wherein the letters are ST 

inscribed in horizontal lines in the 

normal manner. When so in- 1 

scribed, the letters in the dia- FiaTOE 2 ' 

gram will form 2n— 1 columns where n is the number of cells forming 
one of the sides of the square from which the triangle has been 
constructed. The total number of letters that can be inscribed within 

the triangle is the sum of n-\-{n— l)+(?i— 2)+(a— 3)+ +1. 

For a triangle based upon a side of 9 cells, the sum is 9+8+7+6+ 
6+4+3+2+1=45. The letters may then be transcribed to form the 
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cryptogram by following another route, or by following a -derived 
numerical key applied to the base of the triangle. A simple method of 
deriving a key of 2n — 1 elements from a key of n elements or letters 
is exemplified herewith. Let the key be DIAGONALS, a word of 
nine letters. Extend this key to 2n — l places by repetition, and 
then assign numerical values as usual: 

n= 9; 2n— 1 = 17 

1-2-3-4—5—6-7—8—9-10-11-12-13-14-15-16-17 
Keyword: DIAGONALSDIAGONA L 

Numerical key: 5-9-1-7-15-13-2-11-17—6-10—3—8-16-14 — 4-12 

This numerical key is the one that has been employed in enciphering 
the message in Figure 3. 




Cryptogram: 

RICRC OCSGE D00NI UA00E 
SEYID RTISS DTSNR AUNTN ' 

PERTR 

Fiqubi 3. 

b. By a slight change in procedure it is possible to encipher a mes- 
sage and produce a text which, for the sake of accuracy in special 
cases, is double the original length, but which is self-checking. Sup- 
pose that instead of applying a single numerical key to the base of the 
triangle, a double-length key is applied to the legs, as shown in 
Figure 4. Here the key is TRIANGLES, extended to double length 
by simple repetition, as follows: 

1 — 2-3-4 — 5-6-7-8—9-10-11-12—13-14-15-16-17—18 
Keyword: TRIANGLESTR I ANGLES 

Numerical key: 17-13-7-1-11-5-9-3-15-18-14—8—2-12—6-10 — 4-16 

This key is applied to the legs of the triangle beginning at the lower 
left-hand comer. The transcription then follows key-number order, 
which results in doubling the length of the message but the repeated 
letters are scattered throughout the whole message. In decrypto- 
graphing such a message the elerk merely omits the second occurrence 
of a letter if it agrees (in identity) with its first appearance in the text. 

c. • Many variations in inscription and transcription can be em- 
ployed in the case of triangles -as well as trapezoids. Some of the 
variations in Hie case of triangles are shown in Figure 5. 
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6. Diagonal methods. — a. A method involving diagonal trans- 
position which is reported to have been employed by the French 




Cryptogram: 

UUSOC YNTSO REOYS ONRER 
DRITI DTOGD RANEO RICSN 
CTRNI GENNE ATCSR OSIIR 
SIOET RTUAI POECO TNESS 
DPRCD AURSD 

Fiouee 4. 

Army in the World War is now to be described. A numerical key is 
derived from a fairly long word or phrase, and a rectangle is con- 
structed, as in Figure 6. The text is inscribed in this .rectangle in 




i 17-13 — 7 — 1-li— 5 — 9 — >-15-14 — 8-3-12—6-10 — 4-16 

Inscription: Up left side, down right, alternately. 

Transcription: (a) In rows from the base line, left to right and right to left, 
alternately, upwards: 

* PISOS RNATU SIERS etc. 

(b) In diagonals from right leg, in key-number order: 

RIEDR OUAYN etc. 

(c) In rows from left leg, in key-number order: 

CTGEO YTCEU eto. 

(d) From columns in key-number order: 

CNROI TUGRU etc. 

Fiotjee 8. 

normal fashion, nulls being employed, if necessary, to complete the 
last line of the rectangle. 

b. The correspondents agree beforehand upon several diagonals 
which run from left to right, and from right to left and which inter- 
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sect, thus cutting up the design quite thoroughly. In Figure 6 let 
these selected diagonals be those indicated by the numbers from 1 to 
6, inclusive, the odd ones indicating diagonals running from left to 
right. In the transcription, the letters along the indicated diagonals 
are first set down in groups of five, proceeding in key-number order. 
Correspondents must also agree beforehand as to whether a letter 
which lies at the intersection of two diagonals will be taken both times 
it is encountered or taken only once and, if so, whether on its first or 
second appearance. After all these letters have been written down, 
one then proceeds with the remaining letters in the usual columnar 
manner, omitting the letters which have already been taken, or, 
again, if specially agreed upon, repeating them every time they are 
encountered. If the latter is done, the inclusion of such letters not 
only serves as a check upon accuracy but also materially increases the 
difficulties of solution, since in this case these letters act like nulls. 
The cryptographing process will become clear upon the study of the 
example in Figure 6. 

Message: ENEMY BATTERY LOCATED AT WOODS 1,000 YARDS 
SOUTHEAST OP MUMMASBURG HEAVY ARTILLERY 
STOP THEY ARE FIRING AT RATE OF THREE ROUNDS 
PER MINUTE FOR THE BATTERY X WILLS, MAJ. 

Keyphrase: MIDNIGHT RIDE OF PAUL REVERE. 

Enciphering diagram: 



M IDN IG H T R IDE OF PA U L RE VE RE 
15-11-2-16-12-9-10-22-19-13-3-4-17-8-18-1-23-14-20-5-24-6-21-7 
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Cryptogram: 

ADARR SESAR NUANX YAAPH HAURA UWYPW 
RHED0 TETFS HETBE RT0IL TGIM0 EITJO 
YRURB TMSFT AHUTT NSLAE YEFYO RESTE 
AESII EDLRT MNORE OLDYO ECAGR YTUMR 
BDSVE LOHTN ATOMO ETEFS TANM 

Piques 6. . ■ 

, jr. / . 

7. Interrupted keyword transposition. — a. This method of 
transposition is a development of a more simple method wherein the 
transposition follows a numerical key. The latter must first be 
described. A keyword or keyphrase of fair length is selected and a 
numerical key derived from it. Let this key be the phrase UNI- 
FORMITY OF METHOD. 



Keyphrase: U NIFO RMIT Y OFMETHOD 

Numerical key: 17-10-6-3-11-14-8-7-15-18-12-4-9-2-16-5-13-1 
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The plain text is then written out in horizontal lines corresponding 
to the length of the key ; then transposition is effected within each row, 
according to the sequence of numbers applicable, as shown in Figure 7. 

Message: ADMINISTRATIVE ORDERS MUST BE COMPLETED AND 
READY TO ACCOMPANY FIELD ORDERS NOT LATER 
THAN 5:00 P.M. THIS DATE. 

Enciphering diagram: 

17-10-6-5-11-14-8-7-15-18-12—4-9—2-16-5-15-1 
A DMIN ISTR A TIVEORDE 

R SMUS TBEC 0 MPLETEDA 

N DREA DYTO A CCOMPANY 

F 1ELD ORDE R SNOTLATE 

R THAN FIVE P MTHISDAT 

E 

Cryptogram: 

EEIIR MTSVD NTDIR OAAAE UPEME BLSSM 
DTCTR OYMEC ARTYO DACND OPNAE TLNAE 
DROID STOEL FRTIA TDHVI HTNMA FESRP 
E 

Figure 7. 

b. In the foregoing case the encipherment takes place only by 
transposition wi thin rows, but it is possible to complicate the method 
by transposing, in addition, the rows as a whole, employing the same 
key or only a portion of it, as much as is required. Thus, if the mes- 
sage contained 18 rows of 18 letters each, then the transposition of 
rows could be effected according to key-number order, the last row 
being taken first (since the number 1 of the numerical key happens 
in this case to be at the end of the numerical key), the 14th row being 
taken second (since the number 2 of the numerical key is the 14th 
number), and so on. Where the message does not contain as many 
complete rows as there are numbers in the key, the transposition, 
takes place in key-number order nevertheless, the rows being taken 
in the numerical order of the numbers present. Using the same key 
and message as in the foregoing case, the encipherment would be as 
shown in Figure 8. 

Enciphering diagram: 

17-10-6-5-11-14-8-7-15-18-12-4-9-2-16-5-15-1 
17: A DMIN ISTR A TIVEORDE 

10: R SMUS TBEC 0 MPLETEDA 

6: N DREA DYTO A CCOMPANY 

3: F IELD ORDE R SNOTLATE 

11: R THAN FIVE P MTHISDAT 

14: E 

Cryptogram: 

ETLNA EDR0I DST0E LFRYM ECART Y0DAC 
ND0PN AAEUP EMEBL SSMDT CTR0T IATDH 
VIHTN MAFES RPEEE IIRMT SVDNT DIR0A 
A 

Fiqubx 8. 
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c. From the preceding method it is but a step to the method of 
interrupted key transposition now to be described. Instead of writing 
the text in regular-length groups corresponding to the length of the 
key, it is written out in irregular groups the lengths of which vary 
according to some prearranged plan. For example, note the basis of 
the variable grouping in the following diagram, which uses the same 
message and key as under a above: 

Enciphering diagram: 

17-10— r6-—5-ll-14— 8— 7-15-18-12 — 4-9—2-16—5-15—1 
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Cryptogram (columnar transposition in key-number sequence) : 

EEEDI UAEAT HIPC OERRM MDRPO AFHTE 
TIHTS BYFTP AVLRP DSEDM NLNTN SANEV 
STMCD CDITD YREDR C0EE0 EARTN OSTAM 
AOALL 

■ ’ ' ' v Fiqubk 9. 

d. ’This method may be combined with that shown under b above, 
thus further complicating the system. In decryptographing such a 
message it is best to use cross-section paper, block out the cells to be 
occupied by letters in the deciphering diagram, and indicate the key 
numbers applicable to each line. This will facilitate the process mate- 
rially and help eliminate errors. 

e. Another method of interrupted transposition is that which 
employs a rather long sequence of digits to control the interruption. 
In order to avoid the necessity of carrying around such a written 
sequence, it is possible to agree upon a number whose reciprocal when 
converted by actual division into its equivalent decimal number will 
give a long series of digits. For example, the reciprocal of 7, or \j7, 
yields a repeating sequence of six digits: 142857142857 . . the 
reciprocal of 49, 1/49, yields a repeating sequence of 42 digits, etc. 



(•The four final letters LCEP ere nulls, to complete the row.) 
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Zeros, when they appear, are omitted from the aeqUen.ce. Suppoge the 
number 19 is agreed upon, the reciprocal of which yields the sequence 
(0)52631578947368421. On cross-section paper mark off sets of cells 
corresponding in number to the successive digits.. >/ Thus: 



I I IXj | |X| 



1X1 



1X1 1X1 



etc. 



Let the message be ATTACK HAS BEEN POSTPONED.. 
Encipherment: 

5 2 6 3 1 5 



|a|h|e|s|o|X| t|a|X|t |s |n| t |n |i>|X| a| b| p|x| c|X|k| e| o |p |e 
Cryptogram: 



AHESQ TATSN TNDAB PCKEO PE 



i /. To decryptograph such a message, the cryptogram is written 
down in a series of cross-section cells, which are then blocked off in 
sets according to the numerical key: 



5 2 6 3 1 6 

tA|H|E|S|0|X|T|AlX|TjslN|TlN|D|X|A|BlP|XlC|X|K|ElO|P|E | 

Taking the letters in consecutive order out of the successive sets, and 
crossing them off the series at the same time as they are being written 
down to construct the plain text, the message is found to begin with 
the following two words: 



5 2 6 3 1 5 

|^|^|E|S|0jX|tlAlXltl$lNlT|wlD|Xl»|B|P|X|^|Xi»|E|0"|P|E | 



ATTACK HAS ... 

g. Preparatory to cryptographing, it is necessary to find the length 
of the message to be enciphered and then to mark off as many cells as 
will be required for encipherment. Nulls are used to fill in cells that 
are not occupied after enciphering the whole message. The secrecy of 
the method depends, of course, upon the reciprocal selected, but there 
is no reason why any fraction that will yield a long series of digits 
cannot be employed. If the selection of key numbers were'restrictfed 
to reciprocals, the secrecy would be more limited in scope than is 
actually necessitated by the method itself. 

8. Permutation method. — a. An old method, known in literal 
ture as the aerial telegraphy method, 1 forms the basis of this system. 

1 So named because it was first devised and employed in messages transmitted 
by a system of semaphore signaling in practical usage in Europe before the 
. electrical telegraph was invented. 
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A set of permutations of 3 4, ... 9 digits is agreed upon and 
these permutations are listed in a definite series. As an example, let 
these permutations be made of the digits 1 to 5, selecting only four 
of the possible 120. Suppose those selected are the following, set 
down in successive lines of the diagram in Figure 10a: 



Permutation 



2 3 15 4 


2 


3 


1 


5 


4 












3 2 5 1 4 


3 


2 


5 


1 


4 












1 5 3 2 4 


1 


5 


3 


2 


4 












4 3 15 2 


4 


3 


1 


5 


2 













Figur* 10a. 



The letters of the plain text, taken in sets of fives, are distributed 
within the sections of the diagram in accordance with the permuta- 
tions indicated above the sections and also at the left. Thus, the 
first five letters of the text, supposing them to be the initial letters of 
the word RECOMMENDATIONS, are inserted in the following 
positions: 



Permutation 



2 3 15 4 





3 


1 


5 


4 




C 


R 


M 


0 



The next five letters are inscribed in the second line of the diagram 
in the sections indicated by the permutation above and at the left of 
the line. Thus: 



Permutation 



2 3 15 4 


2 


3 


1 


5 


4 


E 


C 


R 


M 


0 


3 2 5 1 4 


3 


2 


5 


1 


4 


N 


E 


A 


H 


D 






4 



This process is continued for each line and for as many lines as there 
are permutations indicated at the left. In the foregoing case, after 
twenty letters have been inserted, one inserts a second set of five 
letters again on the first line, placing the letters of this second set 
immediately to the right of those of the first set, respectively in key- 
number order. The succeeding lines are treated in similar fashion 
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until the whole message has been enciphered. The following example 
will illustrate the process: 

Message: RECOMMENDATIONS FOR LOCATIONS OF NEW 
BALLOON POSITIONS MUST BE SUBMITTED 
BEFORE 12TH AIRDROME COMPANY CHANGES 
COMMAND POST TOMORROW. 



Enciphering diagram: 
Permutation 



2 3 15 4 


2 


3 


1 


5 


4 


EASEOM 


CTIDMA 


RCOTRM 


MOIECD 


OITBEN 


3 2 5 1 4 


3 


2 


5 


i 


4 


NOSRPS 


ESNOMO 


ANUTNT 


MNOFOP 


DFMEAT 


1 5 3 2 4 


1 


5 


3 


2 


4 


TESWYO 


SLSTNR 


OBBLHO 


IWTECM 


NAEFAR 


4 3 15 2 


4 


3 


1 


5 


2 


LNIRCB* 


ROMISC* 


FLUHGO 


OPTDOD* 


OOBAEW 



* The letters B, O, end D are nulls, to complete the figure. 

FlQtTBE 10b. 



The letters of the cipher text are taken from the diagram according 
to any prearranged route, the most simple being to transcribe the 
lines of letters in groups of fives, thus: 

EASEO MCTID MARCO TRMMO IECDO ITBEN 
NOSRP SESNO MOANU TNTMN 0F0PD FMEAT 
TESWY OSLST NROBB LHOIW TECMN AEFAR 
LNIRC BROME SCFLU HGOOP TDODO OBAEW 

b. The foregoing method when employed in its most simple form 
does not yield cryptograms of even a moderate degree of security; 
but if the method of inscription and transcription is varied and made 
more complex, the degree of security may be increased quite notice- 
ably. It is possible to use longer permutations, based on sets of 6, 
7, 8, or 9 digits, but in every case the successive permutations must 
be prearranged as regards both their exact composition and their 
order or arrangement in the diagram. 

9. Transposition method using special figures. — a. The 
method now to be described is useful only in special cases where the 
correspondence is restricted to brief communications between a very 
limited number of persons. It is necessary to agree in advance on 
certain particulars, as will be seen. Let the message to be enciphered 
be the following: 

FOUR TRANSPORTS WILL BE COMPLETED BY END 
OF APRIL AND SIX MORE BY END OF JULY. 



1111555 ° — 35- 2 
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d. Still another series may be formed, as follows: 



f 




Cryptogram: 

FSLLN NOIPP LEEID AUWOM BYTRO RRSRO 
EBEPF TTCDA LOOMA DRFXN NEJID EBYUS 
YL 

Figube 13. 

e. A figure of different form than the preceding forms the basis of 
the next type. 



OOEDRtOXRWPNHLE 




FPBEURCBTSUEAILDSLT 



FHROPSBJIXEL 




OAODADEFRIIULHNI 

Cryptogram: 

OOEDR TOYRW PNNLE FPBEU RCBTS 
MEAIL DSLTF NROPS BJIXE LOAOD 
ADEFR IYULM NY 

Fioube 14. 

• j. From the foregoing examples, it is obvious that many other 
figures may be used for effective transpositions of this kind, such as 
stars of varying numbers of points, polygons of various symmetrical 
shapes, etc. It is merely necessary to agree upon the figures, the 
number of figures per line, the starting points of the inscription and 
transcription processes. 

g. The method lends itself readily to combination with simple 
monoalphabetic substitution, yielding cryptograms of a rather high 

( degree of secijixity. 
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Section III 

POLYPHASE TRANSPOSITION SYSTEMS 

Paragraph 



Polyphase transposition methods in general 10 

True and false polyphase transpositions 11 

True double transposition 12 



10. Polyphase transposition methods in general. — a. In 

paragraph 32 of Special Text No. 165, brief mention was made of 
transposition systems in which two or more processes of rearrange- 
ment are involved. It was stated that only a very limited number 
of such transposition methods are practicable for military use, but 
that the degree of security afforded by them is considerably greater 
than that afforded by certain much more complicated substitution 
methods. The methods referred to are those which involve two or 
more successive transpositions, and merely for purposes of brevity 
in reference they will here be called polyphase transposition methods 
to distinguish them from the single monophase methods thus far 
described. 

b. It is obvious that a polyphase transposition method may involve 
2, 3, . . . successive transpositions of the letters of the plain 
text. To describe these methods in general terms, one may indicate 
that the letters resulting from a first transposition, designated as the 
T— 1 transposition, form the basis of a second, or T-2 transposition. 
If the process is continued, there may be T-3, T-4 . . . trans- 
positions, and each may involve the use of a geometric figure or 
design. For convenience, the design involved in accomplishing the 
T-l transposition may be designated as the D-l design; that involved 
in accomplishing the T-2 transposition as the D-2 design, etc. 
However, it may as well be stated at this point, that so far as military 
cryptography is concerned, methods which involve more than D-2 
and T-2 elements are entirely impractical and often those which 
involve no more than D-2 and T-2 elements are also impracticable 
for such use. 

11. True and false polyphase transpositions. — a. It is pos- 
sible to perform two or more transpositions with the letters of a text 
and yet the final cryptogram will be no more difficult to solve than if 
only a single transposition had been effected. The equivalent of this in 
the case of substitution ciphers is to encipher a monoalphabetic crypto- 
gram by means of a second single alphabet; the final result is still a 
monoalphabetic substitution cipher. likewise, if a message has been 
enciphered by a simple form of route transposition and a second and 
similar or approximately similar form of simple route transposition 
is again applied to the text of the first transposition, the final te'xt is 
still that of a monophase transposition cipher. Again, twp transpo- 
sitions may be accomplished without really affecting a most thorough 
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scrambling of the letters composing the original text. Examples 
will serve to clarify the difference between false and true polyphase 
transposition. 

b. Note the following simple columnar transposition cipher pre- 
pared according to the method described in paragraph 26 of Special 
Text No. 165: 

Message: DELIVER ALL AMMUNITION TO 4TH DIVISION 
DUMP 

Keyword: SCHEDULE =S_C_H_E^D^L^E 
Enciphering rectangle: 

7 1 5 32 8 64 



D-l 



Cryptogram (T-l): 

ELIRX VMTDD IMNHN AIOIP LAOTO RNFVM 
DLTUS EUOIU 

Fiourk is. 

In producing the foregoing cryptogram only the columns were 
transposed. Suppose that by prearrangement, using the keyword 
BREAK (derived numerical key=2~5-3-l-4), the horizontal lines 
of the foregoing enciphering rectangle were also to be transposed. 
For example, let the horizontal lines of the rectangle D-l be trans- 
posed immediately before taking the letters out of the columns of the 
design (in key-number order) to form the cipher text. Thus: 



Cryptogram (T-2): 

REIIL DVTDM HINNM IAOPI TLOOA VRFMN 
UDTSL IE0UU 

Fioubi 18 . 
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D-l 



7 1 5 3 2 3 6 4 





1-1 
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c. The foregoing, however, is not a case of true polyphase or so- 
called double transposition. The same final result may be accom- 
plished in a way which will at first glance appear quite different but is 
in reality one that accomplishes the same two operations by combin- 
ing them in one operation. Let the message be inscribed as before, 
but this time with both numerical keys applied to the top and side 
of the rectangle. Then let another rectangle of the same dimensions, 
but with numbers in straight sequence instead of key-number sequence, 
be set alongside it. Thus: 



71532864 12345678 




Each letter in D-l is now transferred to that cell in D-2 which is 
indicated by the row and column indicators of the letter in D-l. 
For example, the first letter, D, of D-l, has the indicators 2-7 and 
it is placed in the 2-7 cell in D-2; the second letter of D-l, which is 
E, is placed in the 2-1 cell of D-2, and so on. The final result is as 
follows: 
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D-l D-2 



Fiqubi 18 . 

It will be seen that if the columns of D-2 are now read downwards 
in straight order from left to right the final cryptogram is identical 
with that obtained under b above: REIIL DVTDM, etc. 

d. The foregoing cipher, often called the Nihilist Cipher, is referred 
to in some of the older literature as a double transposition cipher 
because it involves a transposition of both columns and rows; and 
indeed as described under b above it seems to involve a double process. 
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It is, however, not an example of true double transposition. When 
the mechanism of this cipher is compared with that now to be 
described, the great difference in the cryptographic security of the two 
methods will become apparent. 

12. True double transposition. — In the form of the false double 
transposition described above, it is only entire columns and entire 
rows that are transposed. The disarrangement of the letters is after 
all not very thorough. In true double transposition this is no longer 
the case, for here the letters of columns and rows become so thor- 
oughly rearranged that the final text presents a complete scrambling 
almost as though the letters of the message had been tossed into a hat 
and then drawn out at random. 

Section IV 

TRUE DOUBLE TRANSPOSITION 

Paragraph 



True double transposition of the columnar type 13 

General remarks on true polyphase transposition 14 



13. True double transposition of the columnar type. — a. It is 
by w ha t is apparently a simple modification of certain of the co- 
lumnar methods already described that an exceedingly good true 
double transposition can be effected. Let a numerical key be derived 
from a keyword in the usual manner and let the message be written 
out under this key to form a rectangle in the usual manner fori colum- 
nar transposition. The length of the message itself determines the 
exact dimensions of the rectangle thus formed, and whether or not it 
is completely or incompletely filled. ; 

b. In its most effective form the double transposition is based upon 
an incompletely filled rectangle; that is, one in which one or more cells 
in the last line remain unfilled. An example of the method now follows. 
Let the keyword be INTERNATIONAL; the message to be enciph- 
ered, as follows: 

OUR ATTACK SLOWING UP IN FRONT OF HILL 1000 
YARDS SOUTHEAST OF GOLDENVILLE STOP RE- 
QUEST PROMPT REENFORCEMENT. 

Keyword: INTERNATIONAL 

Derived numerical key: 4-7-12-3-11-8-1-13-5-10-9-2-6 

The first, or D-l, rectangle is inscribed in the usual manner of simple 
numerical key columnar transposition. It is shown as D-l in the 
accompanying figure. The letters oj the T-l transposition are then 
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4—7—12 - 3—11 - 8— 1—13 -5-10-9—2—6 



0 


u 


R 


D 


D 


B 


□ 


C 


K 


S 


L 


0 


W 


I 


N 


G 


u 






N 


F 


R 


0 


N 


T 


0 


F 


H 


I 


D 


□ 


0 


N 


E 


T 


H 


0 


U 


S 


A 


N 


D 


□ 


O 


R 


D 


S 


S 


0 


U 


T 


H 


E 


A 


S 


□ 


0 


□ 


G 


0 


L 


D 


E 


N 


V 


! 


□ 


L 


E 


s 


□ 


5 


P 


R 


E 


Q 


U 


E 


i 


□ 


P 


R 


0 


M 


□ 


T 


R 


E 


E 


N 


F 


0 


R 


C 


E 


M 


E 


N 


T 













D-l 

4—7—12 - 3—1 1-8— 1—13 - 5- 10 - 9—2— 6 
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D-2 



Fiqvss 19a. 

inscribed in the second, or D-2, rectangle in the normal manner oj 
writing, that is, from left to right and from the top downwards. This 
is shown in D-2 of Figure 19a for the first two columns of D-l (in 
numerical key order) after transfer of. their letters into D-2. The 
letters of the remaining columns of D-l are transferred in the same 
manner into D-2, yielding the following rectangle: 
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4 — 7—12 - 3—11 - 8 — 1—13 - 5 - 10 - 9 — 2 — 6 
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For the T-2 text the letters are transcribed from the D-2 rectangle, 
reading down the columns in key-number order, and grouping the 
letters in fives. The cryptogram is as follows: 

PTRUT OGTTI RLOPP DUSVO SOSAU AOREA 
CORSH EEDNF WTULC NNEST QOFOY KFFHR 
PUORA NTLTE LNLES GLOER OMONA IHIES 
ENETN MDIT 



c. In paragraph 28 of Special Text No. 165 a variation of the simple 
columnar key method of transposition was described. If tbe process 
therein indicated is repeated, double transposition is effected. The 
following example will serve to illustrate the method, using the same 
message and key as were used in the paragraph to which reference 
was made: 



Message: REQUEST IMMEDIATE REENFORCEMENTS 



Keyword: PRODUCT 

Derived numerical key: 4-5— 3-2-7-1-6 

Encipherment: 



4-5-3-2-7-1-6 4-5-3-2-7-1-6 
Text: REQUEST IMMEDIA 
T-I: SINEUEE EQMRCRI 
T-2: EREEERE FNMTASE 



4-5-3-2-7-1-6 
T E R E E N F 
T 0 T E M 'E R 
T S E I Q 0 T 



4-5-3-2-7-1-6 4-5 
ORCEMEN TS 
STAFNED EM 
MEIRDUC M N 



Cryptogram: 

EREEE REFNM TASET SEIQO TMEIR 
DUCMN 
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d. In some respects this modified method is simpler for the novice to 
perform correctly than, is that employing rectangles. Experience has 
shown that many inexpert cryptographic clerks fail to perform the two 
transpositions correctly when D-l and D-2 rectangles are employed 
in the work. 

14. General remarks on true polyphase transposition. — a. 

The cryptographic security of the true double transposition method 
deserves discussion. Careful study of a cryptogram enciphered by the 
double transposition method set forth in paragraph 136 and c will 
convince the student that an extremely thorough scrambling of the 
letters is indeed brought about by the method. Basically, its principle 
is the splitting up of the adjacent or successive letters constituting 
the plain text by two sets of “cuts ”, the second of which is in a direc- 
tion that is perpendicular to the first, with the individual “cuts” of 
both sets arranged in a variable and irregular order. It is well adapted 
for a regular and voluminous exchange of cryptograms between corre- 
spondents, because even if many messages in the same key are inter- 
cepted, so long as no two messages are identical in length, they can only 
be ciyp to analyzed after considerable effort. 

6. Triple and quadruple transpositions of the same nature are 
possible but not practical for serious usage. Theoretically, a continu- 
ation or repetition of the transposition process will ultimately bring 
about a condition wherein the D-n rectangle is identical with the 
D-l rectangle; in other words, after a certain number of trans- 
positions the rectangle produced by a repetition of the crypto- 
graphing process results finally in decryptographing the message. 
Exactly how many repetitive transpositions intervene in such cases is 
extremely variable and depends upon factors lying outside the scope 
of this text. 

c. In the example of cryptographing given in paragraph 136, the 
D-l and D-2 rectangles are identical in dimensions, and identical 
numerical keys are applied to effect the T-l and T-2 transpositions. 
It is obvious, however, that is it not necessary to maintain these 
identities; D-l and D-2 rectangles of different dimensions may 
readily be employed, and even if it is agreed to have the dimensions 
identical, the numerical keys for the two transpositions may be differ- 
ent. Furthermore, it is possible to add other variable elements. (1) 
The direction or manner of inscribing the letters in the D-l rectangle 
may be varied ; (2) the direction of reading off or taking the letters out 
of the D-l rectangle in effecting the T-l transposition, that is, in 
transferring them into the D-2 rectangle, may be varied; (3) the 
direction of inscribing these letters in the D-2 rectangle may be 
varied; (4) the direction of reading off or taking the letters out of the 
D-2 rectangle in effecting the T-2 transposition may be varied. 
Finally, one or more nulls may be inscribed at 'the end of either the 
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D-l or the D-2 rectangle (but not both) in order that the total 
number of letters involved in the two transpositions be different, a 
factor which still further increases the degree of cryptographic 
security. 

d. The solution of cryptograms enciphered upon the double trans- 
position principle is often made possible by the presence of certain 
plain-text combinations, such as QU and CH (in German). For this 
reason, careful cryptographers substitute a single letter for such 
combinations, as decided upon by preagreement. For example, in 
one case the letter Q was invariably used as a substitute for the 
compound CH, with good effect. 

Section V 
GRILLES 

Paragraph 



Types of cryptographic grilles 15 

Simple grilles 16 

Revolving grilles 17 

Grilles of other geometric forms 18 

Polyphase transposition by grilles 19 

Increasing the security of revolving grilles 20 

Construction of revolving grilles 21 

Nonperf orated grilles , 22 

Rectangular or “post card” grilles 23 

Construction of rectangular or “post card” grilles 24 



15. Types of cryptographic grilles. — Broadly speaking, crypto- 
graphic grilles 1 are sheets of paper, cardboard, or thin metal in which 
perforations have been made for the uncovering of spaces in which 
letters (or groups of letters, syllables, entire words) may be written 
on another sheet of paper upon which the grille is superimposed. 
This latter sheet, usually made also of cross-section paper, will here- 
after be designated for purposes of brevity in reference as the grille 
grid, or grid. Its external dimensions are the same as those of the 
grille. Grilles are of several types depending upon their construc- 
tion and maimer of employment. They will be treated here under 
the titles of (1) simple grilles, (2) revolving grilles, (3) nonperforated 
grilles, and (4) “post card” grilles. 

16. Simple grilles. — a. These consist usually of a square in which 
holes or apertures have been cut in prearranged positions. When 
the grille is superimposed upon the grid, these apertures disclose cells 
on the grid, in which cells letters, groups of letters, syllables, or entire 
words may be inscribed. An example is shown in Figure 20. The 
four sides of the obverse surface of the grille are designated by the 
figures 1, 2, 3, 4; the four sides of the reverse surface, by the figures 



1 Also often called “stencils.” 
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5, 6, 7, 8. These figures are employed to indicate the position of the 
grille upon the grid in encipherment. 

b. (1) In cryptographing a message the grille is placed upon the 
grid, in one of the eight possible positions: Obverse surface up, with 




figure 1, 2, 3, or 4 at the top left; or reverse surface up, with figure 5, 
6, 7, or 8 at the top left. The letters of the plain text are then 
inscribed in the cells disclosed by the apertures, following any pre- 
arranged route. In Figure 21, the normal manner of writing, from 
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left to right, and from the top downwards, has been followed in the 
inscription, the message being ALL DESTROYERS OUTSIDE. 




(2) The transcription process now follows. The cipher text is 
written down, the letters being taken by following any prearranged 
route, which must be perpendicular to the route of inscription, other- 
wise the letters will follow in plain-text order. In the following, the 
route is by columns from left to right. 

Cryptogram: 

LRTAD TSSER YOIDS ELOEU 

(3) If the number of letters of the plain-text message exceeds the 
number of cells disclosed by one placement of the grille, the letters 
given by this placement are written down (in cryptographic order), 
and then the grille is placed in the next position on a fresh grid; the 
process is continued in this manner until the entire message has been 
cryptographed. The several sections of the cipher letters resulting 
from the placements of the grille on successive grids merely follow 
each other in the final cryptogram. In this manner of employment 
it is only necessary for the correspondents to agree upon the initial 
position of the grille and its successive positions or placements. 

c. It is obvious that by the use of a simple grille the letters of a 
message to be cryptographed may be distributed within an enveloping 
message consisting mostly of “dummy” text, inserted for purposes of 
enabling the message to escape suppression in censorship. For 
example, suppose the grille shown in Figure 20 is employed in position 
1 and the message to be conveyed is ALL DESTROYERS OUTSIDE. 
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The letters of this message are inscribed in their proper places on the 
grid, exactly as shown in Figure 21. An “open” or disguising text 
is now to be composed; the latter serving as an envelope or “cover” 
for the letters of the secret text, which remain in the positions in 
which they fall on the grid. The open or disguising text, in other 
words, is built around or superimposed on the secret text. Note how 
this is done in Figure 22, with an apparently innocent message 
reading: 



I HAVE WORKED VERY WELL ALL DAY, TRYING TO 
GET EVERYTHING STRAIGHTENED UP BEFORE GOING 
ON MY NEXT TRIP SOUTH, BUT INSIDE TEN DAYS . . . 
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Figure 22 . 
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d. The foregoing method naturally requires the transmission of 
considerably more text than is actually necessary for conveying the 
message intended. Where questions of censorship are not involved, 
the method is therefore impractical. A modification of the method 
suggests itself in the use of a transparent sheet of paper superimposed 
upon a square or other figure in which the individual cells are irregu- 
larly numbered and the inscription process follows the sequence of 
numbers. An example is shown in Figure 23, using the message 
ROCK CREEK BRIDGE WILL BE DESTROYED WHEN 
TAIL HAS CROSSED. 
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Figure 23. 

The transcription may now follow any prearranged route. The 
normal method of reading would produce the cryptogram beginning 
WCTEH OEERI, etc. It is obvious that the correspondents must 
possess designs with identically numbered cells. 1 

17. Revolving grilles. — a . In this type of grille (see fig. 24a) 
the apertures are also formed by perforating a sheet of cross-section 
paper according to prearrangement, but these apertures are so dis- 
tributed that when the grille is turned four times successively through 
angles of 90° and set in four grille positions on the grid, all the cells on 
the grid are disclosed in turn. (The preparation of such grilles will 
be discussed in par. 21.) If letters are inserted in the cells so disclosed, 
then after a complete revolution of the grille every one of the cells of 
the grid will contain a letter and thus the grid will be completely 
filled. For this reason such a grille is also called a self-filling, or an 
automatic-completion grille. The secrecy of messages enciphered by 
its means is dependent upon the distribution or position of the aper- 
tures, the sequence of grille positions on the grid (i. e., whether in the 
order 1, 2, 3, 4 clockwise; or 1, 3, 4, 2 etc.), and the route followed in 
inscribing and transcribing the letters in the cells of the grid. For each 
position of the grille, one-fourth the total number of letters of the 
text is inscribed; hence it is convenient to refer to “sections” of the 
text, it being understood that each section consists of one-fourth the 
total number of letters. 

b. There are two possible procedures so far as the inscription-tran- 
scription sequence is concerned. (1) The letters of the plain text may 
be inscribed in the cells of the grid through the apertures disclosed by 
the grille and then, when the grid has been completely filled, the 
grille removed, and the letters transcribed from the grid according to a 
prearranged route; or, (2) the letters of the plain text may first be 
inscribed in the cells of the grid according to a prearranged route and 
then the grille applied to the completely-filled grid to give the sequence 

1 The system employed by the French Army in 1886 was of the nature here 
described. 
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of letters forming the cipher text of the transcription process. The 
first method will be described in c below; the second in e below. 

c. Taking the simplest manner of inscribing the letters, that is, 
from left to right and from the top downwards, the letters of the first 
section of the text are inscribed in the cells disclosed by the apertures, 
the grille being in the first position. This is shown in Figure 24b. 
The grille is then given % turn clockwise, bringing Figure 2 to the top 
left. If the grille has been correctly prepared, none of the cells dis- 
closed in the second grille position On the grid will be occupied by a 
letter. The letters of the second section are then inscribed, this being 
shown in Figure 24c. In Figure 24d and e, the results of inscribing the 
third and fourth sections, respectively, are shown. The letters of the 
cryptogram are then taken out of the completed grid by following any 
prearranged route of transcription. The cryptogram below has been 
transcribed by following down the columns in succession from left 
to right. 

d. To deayptograph such a message, the cipher letters are inscribed 
columnwise in a grid 10 by 10 (i. e., one composed of 100 cells, 10 per 
side) and then the grille applied to the square in four consecutive 
positions corresponding to those used in cryptographing. The letters 
disclosed by each placement of the grille are written down as they 
appear, section after section. 

e. The second manner of employing a revolving grille is merely the 
reciprocal of the first. The procedure followed in the first method to 
decryptograph a message is followed in the second method to crypto- 
graph a message; and the procedure followed in the first method to 
cryptograph is followed in the second method to decryptograph. 

18. Grilles of other geometric forms. — Grilles are not limited to 
square-shaped figures. They may be equilateral triangles, pentagons, 
hexagons, and so on. Any figure which can be pivoted upon a central 
point and which when revolved upon this pivot can be placed in a 
succession of homologous positions over a grid corresponding to the 
grille will serve equally well. A triangle affords three grille positions, 
a pentagon, five, and so on. 

19. Polyphase transposition by grilles. — One grille may be 
employed to inscribe the letters of the message on . the grid, and a 
second, and different, grille employed to transcribe them from the 
grid to form the final text of the cryptogram. This would constitute a 
real double transposition method of great complexity. Polyphase 
transposition by a series of grilles is of course possible. 

20. Increasing the security of revolving grilles. — a. The total 
number of letters which a grille will exactly encipher is termed its 
capacity. If the number of letters of a message is always equal to 
the total capacity of the grille, this information is of great aid in 
solution by the enemy. For example, a message of 64 letters indi- 
cates a grille 8 by 8 with 16 apertures; one of 144 letters, a grille 12 




Cryptogram: 



LHICV YROOT WILHN FSOMT 
HURTI TCULO ROEDA TUVUI 
ESTEL YFRMU RNSFE FASES 
ESEAT OIDTL YNOIN AHEAH 
EDFOT NHSHH ETAMI YOSRE 

Fwuxs 24. 
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by 12 with 36 apertures, and so on. There are, however, methods of 
employing a grille so that it will serve to encipher messages the 
lengths of which are greater or less than the capacity of the grille. 

b. When the total number of letters is less than the capacity of 
the grille, no modification in method of use is necessary. Encipher- 
ment of such a message comes to a close when the last plain-text 
letter has been inscribed. In decryptographing such a message, the 
recipient must strike out, on the grid upon which he is to inscribe 
the cipher text, a number of cells corresponding to the difference 
between the number of letters of the text as received and the total 
capacity of the grille. The location of the cells to be thus eliminated 
must be prearranged, and it is best usually to strike them off from 
the final positions of the grid. 




b 

PlGUBE 25 . 




c. When the total number of letters is equal to or greater than the 
capacity of the grille, a grid of greater capacity than that of the grille 
can be prepared, on which the grille may be positioned several times, 
thus forming a large or composite grid composed by the juxtaposition 
of the several small grids. If there are a few cells in excess of the 
actual number required, these may be struck off from the large grid 
at prearranged points, for example, from the last column and row, 
as shown in Figure 25b. The grille is then placed in its first position 
in turn on each of the component grids, then in its second position, 
and so on. An example will serve to illustrate. A message of fifty- 
two letters is to be enciphered with the grille shown in Figure 25a, 
the capacity of which is sixteen letters. The number of letters of the 
message being greater than three times sixteen, the composite grid 
must be composed of four small grids containing a total of sixty-four 
cells. Therefore, twelve of these cells must be eliminated. These 
are shown in Figure 25b, together with the number indicating the 
positions occupied by the letters of the text. , 
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21. Construction of revolving grilles. — a. There are several 
ways of preparing revolving grilles, of which the one described below 
is the most simple. All methods make use of cross-section paper. 

b. Suppose a revolving grille with a capacity of 100 letters is to be 
constructed. The cells of a sheet of cross-section paper 10 by 10 are 
numbered consecutively in bands from the outside to the center, in 
the manner shown in Figure 26a. It will be noted that in each band, 
if n is the number of cells forming one side of the band, the highest 
number assigned to the cells in each band i3 n- 1. 

e. It will be noted that in each band there is a quadruplication of 
each digit; the figure 1 appears four times, the figure 2 appears four 
times, and so on. From each receding band there is to be cut out 
(n-1) cells: from the outermost band, therefore, nine cells are to be 
cut out; from the next band, seven; from the next, five; from the 
next, three; and from the last, one cell. In determining specifically 
what cells are to be cut out in each band, the only rules to be observed 
are these: (1) One and only one cell bearing the figure 1 is to be cut 
out, one and only one cell bearing the figure 2 is to be cut out, and 
so on; (2) as random a selection as possible is to be made among the 
cells available for selection for perforation. In Figure 26b is shown 
a sample grille prepared in this way. 

d. If the side of the grille is composed of an odd number of cells, 
the innermost band will consist of but one cell. In such case this 
central cell must not be perforated. 

e. It is obvious that millions of differently perforated grilles may 
be constructed. Grilles of fixed external dimensions may be desig- 
nated by indicators, as was done by the German Army in 1915 when 
this system was employed. For example, the FRITZ grille might 
indicate a 10 by 10 grille, serving to encipher messages of about 100 
letters; the ALBERT grille might indicate a 12 by 12 grille, serving 
to encipher messages of about 144 letters, and so on. Thus, with a 
set of grilles of various dimensions, all constructed by a central 
headquarters and distributed to lower units, systematic use of grilles 
for messages of varying lengths can be afforded. 

/. A system for designating the positions of the perforated cells of 
a grille may be established between correspondents, so that the 
necessity for physical transmission of grilles for intercommunication 
is eliminated. An example of a possible system is that which is based 
upon the coordinate method of indicating the perforations. The 
columns from left to right and the rows from bottom to top are 
designated by the letters A, B, C, . . . Thus, the grille shown in 
Figure 26b would have the following formula: 

ADG; BBEH; CDJ; DEG; EACH; FFI; GE; HBDHJ; IDG; 
JABFI, 
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g. Given the formula, the eight comers of the grille can be labeled 
in various ways by prearrangement; but the simplest method is 
that shown in connection with Figure 26b. Then the ini tial position 
of the grille can be indicated by the number which appears at the 
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Figuee 26 . 

upper left-hand comer when the grille is placed on the grid, ready for 
use. Thus, position 1 indicates that the grille is in position with the 
figure 1 at the upper left-hand comer; position 3, with the figure 3 
at the upper left-hand comer, etc. 
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h. The direction of revolving the grille can be clockwise or counter* 
clockwise, so that correspondents must make arrangements before* 
hand as to which direction is to be followed. 

i. Revolving grilles can be constructed so that they have two 
operating faces, an obverse and a reverse face. They may be termed 
revolving-reversible grilles. The principles of their construction merely 
involve a modification of those described in connection with ordinary 
revolving grilles. A revolving-reversible grille will have eight possible 
placement indicators; usually positions 1 and 5, 2 and 6, etc., cor- 
respond in this obverse-reverse relationship, as shown in Figure 20. 

j. The principles of construction described above apply also to 
grilles of other shapes, such as triangles, pentagons, etc. 

22. Nonperforated grilles. — a. All the effects of a grille with 
actual perforations may be obtained by the modified use of a nonper- 
forated grille. Let the cells that would normally be cut out in a grille 
be indicated merely by crosses thereon, and then on a sheet of cross- 
section paper let the distribution of letters resulting from each place- 
ment of the grille on a grid be indicated by inserting crosses in the 
appropriate cells, as shown in Figure 27. 
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Figure 27a. 



Figuxe 27b. 



b. Note should be made of the fact that in Figure 27b the distribu- 
tion of crosses shown in the third row of cells is the reverse of that 
shown in the first; the distribution shown in the fourth row is the 
reverse of that shown in the second. This rule is applicable to all 
revolving grilles and is of importance in solution. 

c. If the letters of the text are now inscribed (normal manner of 
writing) in the cells not eliminated by crosses, and the letters trans- 
scribed from columns to form the cryptogram, the results are the same 
as though a perforated grille had been employed. Thus: 







£ff CRAEOLDARDDATX 

Cryptogram: 

EWCRA EOLDA RDDAT Y 

Figure 27c. 
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d. It is obvious that a numerical key may be applied to effect a 
columnar transposition in the foregoing method, giving additional 
security. 

e. The method is applicable to grilles of other shapes, such as tri- 
angles, pentagons, hexagons, octagons, etc. 

j. In Figure 27c it is noted that there are many cells that might be 
occupied by letters but are not. It is obvious that these may be filled 
with nulls so that the grid is completely filled with letters. Long 




Figube 28. 



messages may be enciphered by the superposition of several diagrams 
of the same dimensions as Figure 27c. 

23. Rectangular or “post card” grilles. — a. The grille shown in 
Figure 28 differs from the ordinary revolving grille in that (1) the 
apertures are rectangular in shape, and are greater in width, thus 
permitting of inscribing several letters in the cells disclosed on the 
grid by each perforation of the grille; and (2) the grille itself admits 
of but two positions with its obverse side up and two with its reverse 
side up. In Figure 28 the apertures are numbered in succession from 
top to bottom in four series, each applying to one position of the 
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grille; the numbers in parentheses apply to the apertures when the 
grille is reversed ; the numbers at the comers apply to the four posi- 
tions in which the grille may be placed upon the grid. 

b. One of the ways in which such a grille may be used is to write 
the first letter of the text at the extreme left of the cell disclosed by 
aperture 1 , the second letter, at the extreme left of the cell disclosed 
by aperture 2, and so on. The grille is retained in the same position 
and the 17th letter is written immediately to the right of the 1st, 
the 18th immediately to the right of the 2d, and so on. Depending 
upon the width of the aperture, and thus of the cells disclosed on the 
grid, 2, 3, 4 . . . letters may bo inserted in these cells. When all the 
cells have been filled, the grille may then be placed in the second 
position, then the third, and finally, the fourth. 

c. Another way in which the grille may be used is to change the 
position of the grille after the 16th letter has been inserted, then 
after the 32d, 48th and 64th; the 65th letter is then inserted to the 
right of the 1st, the 81st, to the right of the 17th, and so on until the 
grid is completed. 

d. Whole words may, of course, be inserted in the cells disclosed by 
the apertures, instead of individual letters, but the security of the 
latter method is much lower than that of the former. 

e. The text of the grid may be transcribed (to form the cryptogram) 
by following any prearranged route. 

j. The successive positions of a post card grille may be prearranged. 
The order 1, 2, 3, 4 is but one of 24 different sequences in which it may 
be superimposed upon the grid. 

24. Construction of rectangular or “post card” grilles. — a . 
A modification of the principles set forth in paragraph 21, dealing 
with the construction of revolving grilles, is applied in the construc- 
tion of rectangular or v post card ” grilles. Note the manner in which 
the cells in Figure 29a are assigned numbers; homologous cells in each 
band receive the same number. In Figure 29a there are three bands, 
numbered from 1 to 8, 9 to 16, and 17 to 24. Then in each band one 
and only one Cell of the same numbered set of four cells is cut out. 
For example, if cell la is selected for perforation from band 1 (as 
indicated by the check mark in that cell), then a cross is written in 
the other three homologous cells, lb, c, and d, to indicate that they 
are not available for selection for perforation. Then a cell bearing 
the number 2 in band 1 is selected, for example, 2c, and at once 2a, 
b, and d are crossed off as being ineligible for selection, and so on. 

In Figure 29c is shown a grille as finally prepared, the nonshaded cells 
representing apertures. 
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b. The grille, Figure 29c, is a ‘ ‘ six-column ” one, that is, the cells form 
six columns. It is obvious that grilles with any even number of 
columns of cells are possible. The number of apertures in each band 
should be equal and this number multiplied by the number of bands 
and then by 4 should equal the capacity of the grille. In the case of 
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the one shown in Figure 29c the capacity is 8 by 3 by 4 or 96 cells; 
this is the same as is obtained merely by multiplying the height (in 
cells) by the number of columns, 16X6=96. If four letters are 
inscribed in each rectangle, the capacity of the grille in terms of 
letters is 384. The grid in this case would, after completion, present 
24 columns of letters, to which a numerical key for a second trans- 
position can be applied in transcription to produce the final text of 
the cryptogram. 
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MISCELLANEOUS TRANSPOSITION SYSTEMS 

Paragraph 



Complex route transposition 26 

Transposition of groups of letters, syllables, and words 26 

Disguised transposition methods 27 

Cipher machines for effecting transposition 28 



25. Complex route transposition. — a. In Figure 30 a route for 
inscribing letters within a rectangle is indicated by a sequence of 
numbers. The initial point may be at any of the four comers of the 
rectangle, or it may be at any other point, as prearranged. The 
letters may be inscribed to form the rectangle by following the route 
indicated and then transcribed from the rectangle to form the crypto- 
gram by following another route; or the letters may be inscribed 
according to one route and transcribed accordingly to the numerical 
route indicated. 
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PlQUBI 30. PlQUEK 31. 

b. A variation of the foregoing is that illustrated in Figure 31, 
wherein the inscription follows the route shown by the arrows. The 
ini tial point of inscription is indicated by the figure 1, and the final 
point, by the figure 2. 

c. In the foregoing case, the route is a succession of the moves 
made by the king in the game of chess; it forms the so-called “king’s 
tour”, in which the playing piece makes a complete or reentrant 
journey covering all cells of the chessboard, each cell being traversed 
only once. A route composed of a succession of moves made by the 
knight, or the so-called “knight’s tour”, is also possible, but in order 
to be practical a grid with the cells numbered in succession would have 
to be prepared for the correspondents, since millions of different re- 
entrant knight’s tours can be constructed 1 on a chessboard of the 
usual 64 cells. 

26. Transposition of groups of letters, syllables, and words. — 

There is nothing in the previously described methods which precludes 
the possibility of their application to pairs of letters, sets of three or 



1 See Ball, W. W. R., Mathematical Recreations and Essays, London, 1928. 
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more letters, or even syllables and whole words. Nor, of course, is 
their use limited to operations with plain text; they may be applied 
as secondary steps after a substitutive process has been completed 
(see Sec. X). 

27. Disguised transposition methods. — a. The system often 
encountered in romances and mystery stories, wherein the message 
to be conveyed is inserted in a series of nonsignificant words con- 
structed with the purpose of avoiding or evading suspicion, is a species 
of this form of “open” cryptogram involving transposition. The 
“open” or enveloping, apparently innocent text may be designated 
as the external text; the secret or cryptographic text may be designated 
as the internal text. A complicated example of external or open and 
internal or secret text is that shown in paragraph 16. 

b. Little need be said of the method based upon constructing exter- 
nal text the letters of which, at prearranged positions or intervals, 
spell out the internal text. For example, it may be prearranged that 
every fourth letter of the external text forms the series of letters for 
spelling out the internal text, so that only the 4th, 8th, 12th . . . 
letters of the external text are significant. The same rule may apply 
to the complete words of the external text, the n, 2 n, 3n, . . . words 
form the internal text. The preparation of the external text in a 
suitable form to escape suspicion is not so easy as might be imagined, 
when efficient, experienced, and vigilant censorship is at work. Often 
the paragraph or passage containing the secret text is sandwiched in 
between other paragraphs added to pad the letter as a whole with text 
suitable to form introductory and closing matter to help allay sus- 
picion as to the presence of secret, hidden text. 

c. A modification of the foregoing method is that in which the 1st, 
3d, 5th, . . . words of a secret message are transmitted at one time 
or by one agency of communication, and the 2d, 4th, 6th, . . . words 
of the message are transmitted at another time or by another agency 
of communication. Numerous variations of this scheme will suggest 
themselves, but they are not to be considered seriously as practical 
methods of secret intercommunication. 

d. Two correspondents may agree upon a specific size of paper and 
a special diagram drawn upon this sheet, the lines of which pass 
through the words or letters of the internal text as they appear in the ex- 
ternal text. For example, the legs of an equilateral triangle drawn upon 
the sheet of paper can serve for this purpose. This method is practi- 
cable only when messages can be physically conveyed by messenger, by 
the postal service, or by telephotographic means. Many variations 
of this basic scheme may perhaps be encountered in censorship work. 

28. Cipher machines for effecting transposition. — These may 

be dismissed with the brief statement that if any exist today they are 
practically unknown. A few words are devoted to the subject under 
paragraph 71 . 
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B. SUBSTITUTION SYSTEMS 

Section VII 

POLYGRAPHIC SYSTEMS 

Paragraph 



Preliminary remarks 29 

Monographic and polygraphic substitution 30 

Polygraphic substitution by means of tables 31 



29. Preliminary remarks. — a. It is assumed that the student has . 
absorbed the information contained in Sections VII to XIII, inclusive; 
Special Text No. 165, Elementary Military Cryptography. The' 
sections deal with the various types of cipher alphabets, simple monoal- 
phabetic substitution, monoalphabetic substitution with variants, the 
more simple varieties of polyalphabetic substitution, cipher disks, and - 
cipher tables. The present study of substitution is a continuation of 
the former, a thorough understanding of which is a requisite to the ex- 
amination of the more complex types of substitution now to be set fortlp 

b. Before entering upon the study referred to, it will be advisable 
to explain several terms which will ’ be used. Substitution methods 
in general may be described as being monoliteral or polyliteral in char- 
acter. In the former there is a strict letter-for-letter replacement, or, 
to include numerical and symbol methods, there is a “one-to-one” 
correspondence between the length of the units of the plain text and 
those of the cipher text, no matter whether the substitution is, mono-, 
alphabetic or polyalphabetic in character. In polyliteral methods, 
however, this “one-to-one” correspondence no longer holds. A 
combination of two letters, or of two figures, or of a letter and a figure, 
may represent a single letter of the plain text; there is here a “ two-to- 
one” correspondence, two characters of the cipher text representing 
one of the plain text. The methods described under Section X, Special 
Text No. 165, fall under the latter designation; the cipher equivalents 
there shown are, properly speaking, bipartite in character. Tripartite 
cipher equivalents are also encountered. Polyliteral methods, there- 
fore, are said to employ polypartite alphabets, of which the bipartite 
type is by far the most com mop. Further on in this text, polyliteral 
methods of greater complexity than those illustrated in Section X, 
Special Text No. 165, will bd discussed. Attention now will be directed 
more particularly to a different type of substitution designated as 
monographic and polygraphic substitution. 

30. Monographic and polygraphic substitution. — a. All the 
methods of substitution heretofore described are monographic in 
nature, that is, in the enciphering process the individual units sub- 
jected to treatment are single letters; there is a letter-for-letter sub- 
stitution, or, to include numerical and symbol methods, there is, as 
in the case of monoliteral substitution, a “one-to-one” correspondency* 
between units of the plain text and those of the cipher text. In poly- 
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graphic substitution, however, combinations of letters of the plain 
text, considered as indivisible compounds, constitute the units for 
treatment in encipherment. If the units consist of pairs of plain-text 
letters, the encipherment is pair-for-pair, and is said to be digraphic 
in character; if the units consist of sets of three letters, it is trigraphic 
' in character, and so on. There is still a “one-to-one” correspondence 
involved) but the units in these cases are composite in character and 
the individual elements composing the units affect the cipher equiva- 
lents jointly, rather than separately. The basic important factor in- 
true polygraphic substitution is that all the letters of the group partici- 
pate in the determination of the cipher equivalent of the group ; the 
identity of each letter of the plain-text group affects the composition 
of the whole cipher group. Thus, in a certain digraphic system AB P 
may be enciphered as XP„, and AC P , on the other hand, may be en- 
ciphered as NK„ ; a difference in the identity of but one of the letters 
of the plain-text pair here produces a difference in the identity of both 
letters of the cipher pair. 

6.^ For practical usage polygraphic substitution is limited to the 
hafidling of digraphs and trigraphs, although very occasionally groups 

- of more than three letters may be employed for special purposes. 

c. The fundamental purpose of polygraphic substitution is the sup- 
pression or rather the elimination of the frequency characteristics of 
ordinary plain text. It is these frequency characteristics which lead, 
sooner or later, to the solution of practically all substitution ciphers. 
When the substitution involves only individual letters in a mono- 
alphabetic system, the cryptogram can be solved very quickly; when 

- it involves individual letters in a polyalphabetic system, the crypto- 
gram can usually be solved, but only after a much longer time and 
much more study, depending upon the complexity of the method. 
The basic principle in the solution, however, is to reduce the poly- 
alphabetic text to the terms of monoalphabetic ciphers and then to 
solve the latter. In true polygraphic substitution on the other hand, 
the solution does not rest upon the latter basis at all because it is not 
a question of breaking up a complex text into simpler elements; it 
rests, as a rule, upon the possibility of analysis on the basis of the fre- 
quency of the polygraphic units concerned. If the substitution is 
digraphic, then the units, are pairs of letters and the normal fre- 
quencies of plain-text pairs become of first consideration; if the sub- 
stitution is trigraphic, the units are sets of three letters and the normal 
frequencies of plain-text trigraphs are involved. In the last two cases 
the data that can be employed in the solution are meager, and are 
far from definite or unvarying in their significance, and that is why 
solution of polygraphic substitution ciphers is often extremely difficult. 

d. Just as in typography, when certain combinations of letters, such 
« as fi, fl, and ffi, are mounted on one and the same piece of type, they 

are called logotypes or ligatures, so in cryptography, when combina- 
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I 

as 



tions of two or more letters are to be treated as a unit in a crypto- 
graphic process, they may also be called ligatures and can be conven- 
iently indicated as being so by placing a bar across the top of the 
combination. Thus, CO D represents the digraph CO of the plain text. 
It will also be convenient to use the Greek letter 0 to represent a letter of 
the alphabet, without indicating its identity. Thus, instead of the cir- 
cumlocution “ any letter of the plain text ”, the symbol 0 o will be used ; 
and for the expression “any letter of the cipher text”, the symbol 0 C 
will be used. The symbol 00 v then means “any plain-text digraph”; 
the symbol 00 e , “ any cipher-text digraph.” To refer specifically to the 
1st, 2d, 3d . . . mem ber of a ligature, the exponent 1, 2, 3 . . . will 
be used. Thus, fl 2 p of REM„ is the letter E; 6 s ,. of XRZ„ is Z. 

31. Polygraphic substitution by means of tables. — a. The 
most simple method of effecting polygraphic substitution involves the 
use of tables similar to that shown in Table 1. This table merely 
presents equivalents for digraphs and is to be employed upon the 
coordinate system, 0* p of 6'0 2 o being sought in the column at the left or 
right, 0 2 p in the row at the top or bottom. The cipher pair, M 2 ,, is then 
found at the in terse ction of the row and column thus indicated. For 
example, AF P =YG 0 ; FH P =AZ C , etc. 

Table 1 

(Showing only a partially filled table) 

Final Letter (8* D ) 



ABCDEFGHIJK ... XYZ 




ABCDEFGHIJK XYZ 
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b. The foregoing table is reciprocal in nature; that is, AF P =YG 0 
and YGp=AF<j. Thus, a single table serves for enciphering as well as 
for deciphering. The word DEFEND would be enciphered as YA NZ 
CY, and then grouped in fives: YANZC Y . . . . When a final single 
letter occurs, a null is added in order to make a pair of letters capable 
of being enciphered by the method. Reciprocity is, however, not an 
essential factor and for greater security nonreciprocal tables are more 
advisable. In such cases an enciphering table must have its comple- 
mentary deciphering table. 

c. Until the amount of text enciphered by means of such a table 
becomes great enough to disclose the cipher equivalents of the most 
frequently used digraphs, such as EN, ER, RE, TH, ON, etc., crypto- 
grams based upon the table are relatively secure against solution. 

d. A simple method for preventing the establishment of the fre- 
quencies characterizing these commonly used digraphs and thus elim- 
inating the principal basis for their identification is given in paragraph 
52e. 

e. The factor that contributes most to the relatively high degree 
of security of the digraphic method described in a and b above is the 
absence of symmetry in the table employed; for this table is con- 
structed by random assignment of values and shows no symmetry 
whatsoever in its arrangement of contents. Hence, even if 0^ in a 
first case of 0 1 0 2 P =0 1 0 2 O is identical with 0 l p in a second case, eW B in the 
first case is wholly different from M 2 . in the secon d case. For example, 
Table 1 shows that ACJ 0 =Xl£ B and AT) B =YY Q -, the cipher resultants 
fail to give any hint that the plain-text pairs contain an identical letter. 

/. If, however, the latter is not the case and the table exhibits 
symmetry in its arrangement of contents, solution is somewhat 
facilitated. Note the following Table 2, for example, in which two 
mixed sequences are employed to form the cipher equivalents. One 
mixed sequence is based upon the keyphrase WESTINGHOUSE 
AIR BRAKE; the other, upon the keyphrase GENERAL ELEC- 
TRIC COMPANY. The word FIRE would be enciphered as KIQA. 
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<P B 
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g. A cursory examination of Table 2 shows that when 0* p is iden- 
tical in two cases then 0 2 „ is identical in these cases, so that in reality 
the encipherment is by no means truly digraphic in character. 

< Described in cryptographic terms, the encipherment of 0^ is poly- 
alphabetic in character whereas that of 0 a p is monoalphabetic. A more 
obvious picture of this condition is brought out in the following rear- 
rangement of Table 2. 
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h. By a slight modification in arrangement but with no change in 
basic principle, the encipherment can be made monoalphabetic so 
far as 0 1 ,, is concerned, and polyalphabetic so far as 0 2 p is concerned. 
Note Table 4. 
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Table 4 
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01 




A 


B 


c 


D 


E 


F 


G 


H 


I 


J 


K 


L 


M 


N 


0 


P 


Q 


R 


S 


T 


U 


V 


ff 


X 


Y 


z 


A 


w 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


w 


X 


z 


B 


E 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


X 


Q 


S 


U 


V 


W 


X 


z 


G 


C 


S 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


W 


X 


z 


G 


E 


D 


T 


R 


A 


L 


C 


T 


I 


0 


u 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


u 


V 


ff 


X 


z 


G 


E 


N 


E 


I 


A 


L 


C 


T 


I 


0 


M 


p 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


W 


X 


z 


G 


E 


N 


R 


F 


N 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


w 


X 


z 


G 


E 


N 


R 


A 


G 


G 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


u 


V 


W 


X 


z 


G 


E 


N 


R 


A 


L 


H 


H 


T 


I 


0 


u 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


u 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


I 


0 


I 


0 


u 


p 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


ff 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


J 


U 


0 


M 


p 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T' 


I 


K 


A 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


u 


V 


ff 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


L 


R 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


u 


V 


ff 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


M 


B 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


ff 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


U 


P 


N 


K 


B 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


0 


C 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


W 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


P 


D 


F 


H 


J 


K 


Q 


S 


u 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


Q 


F 


H 


J 


K 


Q 


S 


U 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


u 


P 


Y 


B 


D 


F 


R 


J 


J 


K 


Q 


S 


U 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


U 


P 


Y 


B 


D 


F 


H 


S 


L 


K 


Q 


S 


u 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


T 


M 


Q 


S 


U 


V 


ff 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


U 


P 


S 


u 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


V 


Q 


U 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


w 


V 


V 


w 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


U 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


u 


X 


X 


W 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


u 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


s 


u 


V 


Y 


Y 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


p 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


u 


V 


ff 


Z 


Z 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


U 


V 


ff 


X 



i. The results given by Table 3 or Table 4 may be duplicated by 
using sliding alphabets, as shown in Figures 32 and 33. In the former, 
which corresponds to Table 3, Alphabets I and IV are fixed, II and III 
are mounted upon the same strip, which is movable. To use these 
alphabets in encipherment, 6\ of (FPp is located on Alphabet II and 
Alphabets II-III are shifted so that 0* p is beneath A on Alphabet I; 
0 2 p is now sought in Alphabet I and fi?, will be found under it on 
Alphabets III and IV, respectively. Thus, for the word FIEE the 
successive positions of the alphabet strips are as shown below, yielding 
the cipher resultant KIQA. 

I — ABCDEFGHIJKLMNOPQRSTUVWXYZ Fixed alphabet 

II— FGHIJKLMNOPQRSTUVWXYZABCDEl .. ,, . . , . 

III— NGHOUARBKCDFJLMPQVXYZWESTI j ‘ — Movable alphabet 

IV — GENRALCTI OMPYBDFHJKQSUVWXZ Fixed alphabet 

I— ABCDEFGHIJKLMNOPQRSTUVWXYZ ...Fixed alphabet 

II— RSTUVffXYZABCDEFGHIJKLMNOPQl ,, ...... 

III — JLMPQVXYZWESTINGHOUARBKCDFj Movable alphabet 

IV— GENRALCTIOMPYBDFHJKQSUVWXZ Fixed alphabet 

Fiqdbi 32. 



Fl»=Kl 0 



RE p — QA 0 




45 



REF ID:A64689 



j. To correspond with Table 4 the alphabet strips are arranged as 
shown in Figure 33. Here Alphabets I and II are fixed, III and IV 
are mounted upon the same movable strip. To use these alphabets 
in encipherment, 0* p of ¥¥ 0 is located on Alphabet IV and Alphabets 
III-TV are shifted so that 6 2 p (I p ) is beneath A on Alphabet I; 6\ (F p ) 
is now sought in Alphabet I and will be found under it on Alpha- 
bets II and III, respectively. Thus, for the word FIRE, the succes- 
sive positions of the alphabet strips are as shown below, yielding the 
cipher resultant NBJU. 



¥I v =TfS, 



I— ABCDEF’GWI JKLMN0PQRSTUVWXY2 _ 

II — ■WESTINGHOUARBKCDFJLMPQVXYZ- 

III — IOMPYBDFHJKQSUVWXZGENRALCT 1 

IV— IJKUINOP(JRSTUVTOyZABCDEPGHj 



Fixed alphabet 

Fixed alphabet 

Movable alphabet 



p — Jtl 0 



> 1 — ABCBEFGHI JKUfNOPQRSTUVWXYZ - Fixed alphabet 

II — WESTINGHOUARBKCDFJLMPQVXYZ Fixed alphabet 

I I I — ALCTIOMPYBDFHJKQSUVWXZGENR 1 . , . , 

IV — EFGHIJKLIINOPQRSTUVWXYZABCDJ Movable alphabet 

Flaps* 33. 



k. Neither Table 3 nor Table 4 presents the possibilities such tables 
might afford for digraphic substitution. They may, however, be 
rearranged so as to give results that will approach more closely to the 
desired ideal as to nonrelationship between cipher equivalents of 
plain-text pairs having an identical letter in common. Note that in 
Table 5, which is based upon the same primary alphabets as Table 3 
and Table 4, the cipher equivalents are the same as in the latter 
tables, but they have been so distributed as to eliminate the unde- 
sirable and externally obvious relationship referred to. (In any 
table of this nature there can be only 676 different pairs of equiva- 
lents, since the table presents merely the permutations of the 26 
letters taken two at a time. It is the distribution of the pairs which 
is important.) 

l. Table 5 still shows symmetry in its construction, and a suspicion 
of its existence formed during the preliminary stages of cryptanalysis 
would aid materially in hastening final solution. 

m. The foregoing tables have all been digraphic in nature, but a 
kind of false trigraphic substitution may be also accomplished by 
means of such tables, as illustrated in the accompanying Table 6, 
which is the same as Table 5 with the addition of one more alphabet 
at the top of the table. 



119555 ”—35 i 
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III. ABCDEFGHIJKLMNOPQRSTUVffXYZ 
IV. RADIOCPTNFMEBGHJKLQSUVWXYZ 
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XX . 
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n. In using this table, 0 l B is located in Alphabet I, and its equivalent, 
e\, taken from Alphabet II; d 2 D is located in Alphabet III, and its 
equivalent, 0 2 c , taken from Alphabet IV ; 0 s „ is the letter lying at the 
intersection of the row indicated by 0% in Alphabet I and the column 
determined by 0\. Thus, FIRE LINES would be enciphered NNZ 
IEQ KOV. It is obvious, however, that only the encipherment of 
0 3 o is polyalphabetic in character; 0‘ p and 0 Z O are enciphered purely 
monoalphabetically. Various other agreements may be made with 
respect to the alphabets in which the plain-text letter will be sought 
in such a table, but the basic cryptographic principles are the same as 
in the case described. 

o. Digraphic tables employing numerical equivalents instead of 
letter equivalents are, of course, possible but in this case the number 
of equivalents required, 676, means that combinations of three figures 
must be used. 
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Section VIII 

CHECKERBOARD DIGRAPHIC SUBSTITUTION 



Paragraph 



Disadvantages of large tables 32 

Four-alphabet checkerboards 33 

Two-alphabet checkerboards 34 

One-alphabet checkerboards; Playfair Cipher 35 

Rectangular designs 36 

Combined alphabetical and numerical checkerboard 37 



32. Disadvantages of large tables. — Digraphic substitution by 
means of tables such as those illustrated in Tables 1, 2, and 5 is 
impractical for military use on account of the relatively large size that 
the table takes, and the inconvenience in their production, change, 
distribution, and handling. Just as it has been noted in Section XII, 
Special Text No. 165, Elementary Military Cryptography, that simple 
sliding alphabet strips can replace large quadricular tables, so it 
will be found that small designs similar to a checkerboard can replace 
the large quadricular tables in digraphic substitution. Although the 
usual chess or checkerboard is based on a square 8 by 8, with 64 cells, 
the term checkerboard will here be used to designate any square design 
with n* cells. 

33. Four-alphabet checkerboards. — a. The simple or single- 

alphabet checkerboard consists of a square 5 by 5, containing 25 cells 
in which the letters of a 25-element alphabet (I and J being inter- 
changeable) are inserted in any prearranged order. When four such 
checkerboard alphabets are arranged in a large square as shown in 
Figure 34, the latter may be employed for digraphic substitution to 
yield the same cipherresults as does the much larger Table 1 (par. 31). 
In this square, 0 ! p of 00 D is sought in section 1 ; O 2 ^ in section 2. Thus, 
0 1 ,, and 0*,, will always form the northwest-southeast comers of an 
imaginary rectangle delimited by these two letters as located in these 
two sections of the square. Then 0 1 c and 0 2 „ are, respectively, the 
letters at the nort heast- so uthw est comers of thi s same rectangle. 
Thus, TG p =TKc; WD B =TX C ; OB,=PS e ; UB P =WP e , etc. In 
decryptographing, 6 1 c and are sought in sections 3 and 4, respectively, 

and their equivalents, 0 l o and noted" in sections 1 and 2, respec- 
tively. It may, of course, be prearranged that 0’ p should be sought 
in the section now labeled 3, 0 a p , in that labeled 4, whereupon 0‘ o would 
be located in the section now labeled 1, 0 2 „, in that now labeled 2. 



